0bb3ead82222553d0c55566e3143d10297800456ad26a2143fcf9fc906f4b03d

Analysis

max time kernel
147s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06-03-2024 18:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b80fbe8f7f8731920b32ccf2b9f65ddd.html
Size

432B
MD5

b80fbe8f7f8731920b32ccf2b9f65ddd
SHA1

f21fbd5959d43a5ea8f83bdba0e2789d1b92cb01
SHA256

0bb3ead82222553d0c55566e3143d10297800456ad26a2143fcf9fc906f4b03d
SHA512

2386f92da2eeec3715e324d3ad8f491fe58710c90da5d1eb0ab378b05a565c58d0189c6c7efb8551ef47f9e075031efc1c5f589d1405a47b5573b05d469573f5

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1132	msedge.exe
1132	msedge.exe
2616	msedge.exe
2616	msedge.exe
2964	identity_helper.exe
2964	identity_helper.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2616 wrote to memory of 4956	2616	msedge.exe	88
PID 2616 wrote to memory of 4956	2616	msedge.exe	88
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 4704	2616	msedge.exe	89
PID 2616 wrote to memory of 1132	2616	msedge.exe	90
PID 2616 wrote to memory of 1132	2616	msedge.exe	90
PID 2616 wrote to memory of 4868	2616	msedge.exe	91
PID 2616 wrote to memory of 4868	2616	msedge.exe	91
PID 2616 wrote to memory of 4868	2616	msedge.exe	91
PID 2616 wrote to memory of 4868	2616	msedge.exe	91
PID 2616 wrote to memory of 4868	2616	msedge.exe	91
PID 2616 wrote to memory of 4868	2616	msedge.exe	91
PID 2616 wrote to memory of 4868	2616	msedge.exe	91
PID 2616 wrote to memory of 4868	2616	msedge.exe	91
PID 2616 wrote to memory of 4868	2616	msedge.exe	91
PID 2616 wrote to memory of 4868	2616	msedge.exe	91
PID 2616 wrote to memory of 4868	2616	msedge.exe	91
PID 2616 wrote to memory of 4868	2616	msedge.exe	91
PID 2616 wrote to memory of 4868	2616	msedge.exe	91
PID 2616 wrote to memory of 4868	2616	msedge.exe	91
PID 2616 wrote to memory of 4868	2616	msedge.exe	91
PID 2616 wrote to memory of 4868	2616	msedge.exe	91
PID 2616 wrote to memory of 4868	2616	msedge.exe	91
PID 2616 wrote to memory of 4868	2616	msedge.exe	91
PID 2616 wrote to memory of 4868	2616	msedge.exe	91
PID 2616 wrote to memory of 4868	2616	msedge.exe	91

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\b80fbe8f7f8731920b32ccf2b9f65ddd.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8595b46f8,0x7ff8595b4708,0x7ff8595b4718
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,16110606292990526809,11229792269156381343,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1864 /prefetch:2
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2132,16110606292990526809,11229792269156381343,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2132,16110606292990526809,11229792269156381343,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2944 /prefetch:8
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,16110606292990526809,11229792269156381343,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,16110606292990526809,11229792269156381343,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,16110606292990526809,11229792269156381343,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,16110606292990526809,11229792269156381343,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5256 /prefetch:1
  2⤵
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,16110606292990526809,11229792269156381343,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5248 /prefetch:1
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,16110606292990526809,11229792269156381343,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,16110606292990526809,11229792269156381343,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,16110606292990526809,11229792269156381343,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5724 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,16110606292990526809,11229792269156381343,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5724 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,16110606292990526809,11229792269156381343,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4024 /prefetch:1
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,16110606292990526809,11229792269156381343,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,16110606292990526809,11229792269156381343,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5580 /prefetch:1
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,16110606292990526809,11229792269156381343,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3376 /prefetch:1
  2⤵
  PID:5388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,16110606292990526809,11229792269156381343,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5380 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2420

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2640

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2168

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
7c6136bc98a5aedca2ea3004e9fbe67d

SHA1
74318d997f4c9c351eef86d040bc9b085ce1ad4f

SHA256
50c3bd40caf7e9a82496a710f58804aa3536b44d57e2ee5e2af028cbebc6c2f2

SHA512
2d2fb839321c56e4cb80562e9a1daa4baf48924d635729dc5504a26462796919906f0097dd1fc7fd053394c0eea13c25219dec54ffe6e9abb6e8cb9afa66bada

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
5c6aef82e50d05ffc0cf52a6c6d69c91

SHA1
c203efe5b45b0630fee7bd364fe7d63b769e2351

SHA256
d9068cf3d04d62a9fb1cdd4c3cf7c263920159171d1b84cb49eff7cf4ed5bc32

SHA512
77ad48936e8c3ee107a121e0b2d1216723407f76872e85c36413237ca1c47b8c40038b8a6349b072bbcc6a29e27ddda77cf686fa97569f4d86531e6b2ac485ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
446B

MD5
1099c4b0adcb3a56f58b662ab598ecb2

SHA1
4d3ddf97c1c4ccaa22c271bf841fcd4a21d7b158

SHA256
d052e512af25e01bc080bf64d28a9ae53deeda928668d79a50ac7a892f757520

SHA512
25cc0b9f9deb3145fa4ffc94bbe5f40abed7599a6c0548e5eb6eebb4306635a98cafd86f6e0579e9cee786dd4481416425795d3ac02c3d135f5c0f0a9cd94111

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
3a962c9928f8e8620c3f48ce8f7be642

SHA1
2c59b0ef2f294ed4cee8edaf227783b0baa1e38d

SHA256
7ff5fe37ad52e0e107de52c2cc57d094f78a7b4c339bfaa3c6bda24c4ab6f0fc

SHA512
efb3a9457c72cd0143434a0e67d41fa4e83fc0284707a3c3192615d0f4bd63705b0902fb3d29d5d9d06cd4b930fd9985091fd47d45fda6b44156bad2e2cd1695

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3361a1b1001af557a1bc269e07e5d5f7

SHA1
84a12016891ae486bec997c551cfacb882b5d566

SHA256
a7275d8d95bcbe4b8c0c555aaa1276142f3ea8205b006da0bc427ae69881e227

SHA512
4a7bb057985e26b024e115736c9ae35b559d89209bc790d6590dec931121a99411665039487ab907c37674e59b877d74d3b9f95ff6dadddcb0075b67487a75cc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
dca5fc16ba4ae8c6c92ecc9b65c404f4

SHA1
88961a357892f15f65454b2ec8eaa4b93b72533f

SHA256
cf13ec17e1767c6431703cce7800fccd208bba2f70af4f3d39973504bd0c19ac

SHA512
e1a217888d9984e072146799ee481fb7d27980a4f285edddbd24048f4e73c1795cf2e2954e129f0200756b2c9d7cc2ed02bb6017d638cdbb2f4a091b1be14fb7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57c592.TMP

Filesize
48B

MD5
07fc6ff9d051b7945b8cd42e64afbdc5

SHA1
3bb1c1cb0d5bad1a2ef60497200611d991ea7723

SHA256
7282d45efe65d008cd111bf882d6f8b7e6b1f39725a72ad1abc48e17cee818cb

SHA512
34f7d51b11d102e8d1f7bb0da8d785e0742243162a78b83b1575606999d7b9672c87236d05e2750396f021358e35ddbdca5024afbd4b9b92d365d52769776f8d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
2338fd5b5f031bc43722f6c0c3d066d6

SHA1
fecd65641d19b81358253d30e783a99fb45f2bac

SHA256
1eae3494942cc58deec2383039e417ad36d814e78a40a6c51f3016d3668a1973

SHA512
bc90faf193737c22ff3f60341efdbafc16077a826e473d82d33e4a36802e9bb6a9e90924460de0ccbead7c962f4e71ac545e3a679cad925d17bcd0fa19f87dd2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
9c152905a5522e2c63874f0979f250d2

SHA1
56398b50521a68ec4b94f10eef1108f37d68a8eb

SHA256
317f6f431d2934f99e48740a1648b9027c2dbb569294ad2ed32177e3e64a3151

SHA512
fab0adb47acd39e278da3faea59fe390834693638981d9a030fe545a7a3126106b1c6ca54c3e712c068a09d4fd65753b45a5423348ae3f75cdd45cbc501805b9

Download Submit